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SAP to 
purchase 
Sybase for 
$5.8 billion 

BY DAVID WORTHINGTON 

SAP announced in May that it 
will acquire venerable database 
company Sybase to bolster its 
mobile development practice. 
The deal is valued at approxi- 
mately US$5.8 billion in cash. 

Sybase's board of directors 
unanimously approved the 
transaction, which is a 44% pre- 
mium over its three-month 
average stock price of about $36 
per share. The transaction will 
close in the third quarter. The 
agreement was signed by SAP's 
American subsidiary and under- 
written by Barclays Capital and 
Deutsche Bank. 

Sybase will operate as a stand- 
alone unit of SAP called "Sybase, 
an SAP Company." Its manage- 
ment team will be kept in place, 
and SAP intends to appoint 
Sybase's CEO John Chen to its 
board. 

Datamonitor analyst Warren 
Wilson said in a statement, "The 
acquisition may also signal a shift 
in SAP's long-standing strategy of 
growth through internal develop- 
ment rather than acquisition — a 
wise shift, in our view, given the 
rapid pace of IT innovation over- 
all and the market's positive 
response to arch-rival Oracle's 
acquisition-based strategy." 

continued on page 14 ► 



For APIs, pleasing developers 
is key to successful evolution 



BY ALEX HANDY 

Just being a finch doesn't guaran- 
tee happiness. As Darwin 
observed in the Galapagos 
Islands, even these tiny birds had 
to evolve to adapt to their com- 
petitive landscape. The same 
evolutionary principles apply to 
Web APIs, according to speakers 
at the Web 2.0 Expo held in San 
Francisco on May 4. 

Sam Ramji, vice president of 
strategy at API management 
software company Sonoa, com- 
pared Web APIs to Darwin's 
finches. He said that APIs are 
evolving at a rapid pace, and 
adaptation is the key to success. 
continued on page 18 ► 
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APIs are evolving to please developers the same way Darwin observed finch beaks adapting to varying food sources. 




Microsoft loses patent 
challenge case to i4i 



BY DAVID WORTHINGTON 

The United States Patent and 
Trademark Office (USPTO) deci- 
sion to uphold i4i's patents for 
handling custom XML has eroded 
Microsoft's defense against violat- 
ing the patents, a legal expert says. 
The patents deal with how 
XML can be used to bind docu- 
ment content to data stored in a 
customized schema. i4i, a Cana- 
dian document management 
company, was awarded the 
patents in 1998. 



While i4i was once a little- 
known company, it played the 
role of a proverbial David against 
Microsoft, the software industry's 
Goliath, using its patents to win 
victories against Microsoft in 
court. Consequently, Microsoft 
was prompted to change XML 
features in Office and was tem- 
porarily barred from selling it. 

Microsoft initially filed to have 

the USPTO re-examine the 

patents in November 2008, argu- 

continued on page 17 ► 
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Cloud development ties code to dollars 



BY ALEX HANDY 

Writing applications for cloud 
environments is a different affair 
that writing for in-house hosting. 
At Mays All About the Cloud 
summit in San Francisco, the 
focus was on what changes 
developers need to make to their 
applications to enable their opti- 
mal use in the cloud. Perhaps the 
most interesting revelation at the 
conference was that of the direct 
correlation between billing and 
the quality of source code. 

Treb Ryan, CEO and founder 
of OpSource, said in a keynote 
talk that cloud hosting offers "the 
best margins I have seen in the 
hosting business." He added that 
Amazon has largely played down 
the profitability of cloud hosting, 
and he suggested they have done 
so to scare off potential competi- 



tion. OpSource has been offer- 
ing hosting for software-as-a-ser- 
vice applications for more than 
five years and has relatively 
recently entered the cloud host- 
ing business. 

Ryan said that applications 
hosted in the cloud are under a 
performance microscope. If they 
send too many requests to the 
database, that will be reflected 
by a higher bill at the end of the 
month. He said that developers 
writing applications for use in 
the cloud must realize that "bad 
code costs me twice as much as 
good code. I can cut my op costs 
in half by optimizing the code. 

Thus, said Ryan, developers 
can see a direct correlation 
between the code they've 
worked on all month and the 
reduction in their cloud hosting 



bill. That's something developers 
haven't really been able to do 
since the days of mainframes and 
time-sharing. 

Elsewhere at the All About 
the Cloud summit, attendees 
and speakers discussed the 
remaining problems of the 
cloud. Integrating cloud applica- 
tions with on-site systems was 
one of the first and most painful 
points discussed. 

Paul Daugherty, chief tech- 
nology architect at Accenture, 
said, "We are at an inflection 
point where integration becomes 
more critical. Increasingly we're 
seeing a big increase in data 
sources used. Initially integra- 
tion was about two different 
applications, but now it's getting 
into the 10s and 20s. 

"There was an interesting 




OpSource's Treb Ryan says cloud 
hosting bills reflect code quality. 

piece of research Gartner did: 
They looked at companies using 
SaaS applications. One of the 
less obvious data points out of 
their sample respondents was 
that 14% or 15% adopted SaaS, 



then reversed back out onto on- 
premise. The No. 1 reason for 
that is cost of integration, and 
cost required was too great." 

Another remaining cloud 
issue is security, said Ryan. 
"We're still addressing security. 
The idea that the vast majority of 
cloud environments have the 
same user name and password 
for all users is ridiculous." 

He added that most cloud 
providers do not currently offer 
a way to tie multiple accounts 
together, and thus whole compa- 
nies sometimes use the same 
login and password for their 
cloud environments. Instead, 
Ryan would prefer accounts that 
could be used by each user, but 
could also be tied together for 
collaboration on the same virtu- 
al machines within the cloud. I 



BSIMM model for building in software security matures 



BY DAVID RUBINSTEIN 

With the sample size of partici- 
pating companies having tripled 
in one year, the folks behind the 
Building Security In Maturity 
Model (BSIMM) have found 
that most have an internal group 
responsible for security, and that 
15 activities to ensure security 
are almost universally done. 

BSIMM began in March 
2009 as a joint effort between 
Cigital and Fortify Software to 
record what organizations do to 
build security into their software 
and organizations. Starting with 
input from nine companies, the 
number of participating organi- 
zations has grown to 30, accord- 
ing to Gary McGraw, CTO at 
security consulting firm Cigital. 
He said the larger sample size let 
the group statistically validate 
the model, and that the levels for 
measuring security are sound. 

McGraw said that the 
BSIMM team observed 109 
activities that the organizations 
do to secure their software, and 
those activities are broken down 
into 12 "large-scale conceptual 
buckets," such as training or 
code review. Then the activities 
within those buckets are again 
divided into three levels: Things 
that most organizations do are at 
the first level, while level 3 is for 
"the rocket science, things that 
are rarely done but are very 
cool," he added. 

Organizations can download 
BSIMM2 to compare their own 
activities to what other groups 



are doing and plan their security 
strategy going forward, ex- 
plained Brian Chess, cofounder 
and chief scientist at Fortify 
Software, which makes vulnera- 
bility detection software and 
provides security services. 

Chess said that the compa- 
nies all do good hosting and net- 
work security. "They all have 
firewalls, that's no great revela- 
tion," he said. "But there are 14 
other activities that almost all 
the companies universally do." 

McGraw said that for those 



getting started with a security 
model, BSIMM2 "is a good way 
to see what other folks are 
doing." Chess noted that not all 
organizations will get the same 
results because not all use the 
same metrics for their security. 

Among the findings are that 
across the 30 organizations par- 
ticipating, the size of the securi- 
ty group in those companies is 
1% of the size of the developer 
group. "That's a healthy num- 
ber," said Sammy Migues of Cig- 
ital. "So if Microsoft has 30,000 



developers, that's a lot of people 
dedicated to security." 

Chess added that some of the 
30 participating companies have 
people he called "satellites" — 
security part-timers who work 
with the security team but "don't 
have it on their business card. 
The satellite concept is an exam- 
ple of something companies 
might want to steal to improve 
their security initiatives." 

McGraw said the BSIMM2, 
published under the Creative 
Commons license, reflects the 



work of 635 people in software 
security groups in the 30 compa- 
nies. "We're building a commu- 
nity of like-minded organiza- 
tions, and it's cool to watch these 
guys talk about what's working 
for them," he said. 

Chess said that although 
organizations like Adobe and 
Bank of America do different 
things, "One thing we learned is 
that they actually have a lot in 
common." When it comes to 
security, Chess quipped, "there 
are no special snowflakes." I 



FIFTEEN COMMON BSIMM ACTIVITIES 



Ensure host and network security basics 
are in place. The organization provides a solid 
foundation for software by ensuring that host and 
network security basics are in place. (100%: 30 of 
30 firms) 

Build/publish security features (authen- 
tication, role management, key manage- 
ment, audit/log, crypto, protocols). The 

SSG provides proactive guidance by building and 
publishing security features for other groups to 
use. (97%: 29 of 30 firms) 

Use external penetration testers to find 
problems. If security has not been a priority, ex- 
ternal penetration testers demonstrate that the or- 
ganization's code needs help. (93%: 28 of 30 firms) 

Create policy. The SSG guides the rest of the or- 
ganization by creating or contributing to policy that 
satisfies regulatory reguirements and customer-dri- 
ven security reguirements. (87%: 26 of 30 firms) 

Identify gate locations, gather necessary 
artifacts. The first two steps toward establishing 
these release gates is to identify gate locations that 
are compatible with existing development practices 



and to begin gathering the input necessary for mak- 
ing a go/no go decision. (80%: 24 of 30 firms) 

Know all regulatory pressures and unify 
approach. A formal approach will map applicable 
portions of regulations to control statements ex- 
plaining how the organization will comply. (80%: 24 
of 30 firms) 

Identify Pll obligations. The way software han- 
dles personally identifiable information (Pll) could 
well be explicitly regulated. (80%: 24 of 30 firms) 

Provide awareness training. This promotes a 
culture of security throughout the organization. 
(80%: 24 of 30 firms) 

Create security standards. The SSG creates 
standards that explain the accepted way to adhere to 
policy. (73%: 22 of 30 firms) 

Perform security feature review. Reviewers 
first identify the security features in an application, 
then study the design looking for problems that would 
cause these features to fail. (73%: 22 of 30 firms) 

Identify software defects found in opera- 
tions monitoring and feed them back to 



development. Defects are used to change devel- 
oper behavior. The contents of production logs can 
be revealing (or can reveal the need for improved 
logging). (73%: 22 of 30 firms) 

Ensure QA supports edge/boundary val- 
ue condition testing. The QA team goes beyond 
functional testing to perform basic adversarial 
tests. (70%: 21 of 30 firms) 

Create or interface with incident response. 

The group either creates its own incident response 
capability or interfaces with the organization's exist- 
ing incident response team. (70%: 21 of 30 firms) 

Create data classification scheme and in- 
ventory. The organization uses the scheme to in- 
ventory its software according to the kinds of data 
the software handles. This allows applications to be 
prioritized by their data classification. (67%: 20 of 
30 firms) 

Use automated tools along with manual 
review. Incorporate static analysis into the code 
review process in order to make code review more 
efficient and more consistent. (67%: 20 of 30 firms) 

Source: BSIMM 
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TIBCO updates complex 
event processing system 



BY ALEX HANDY 

Two seconds isn't a lot of time, 
but in basketball and business, 
it can mean the difference 
between victory and loss. TIB- 
CO Software announced 
sweeping revisions to its Busi- 
ness Events complex event-pro- 
cessing (CEP) platform aimed 
at giving its customers that two- 
second advantage. 

"We need to stop using 20th- 
century technology for 21st-cen- 
tury problems," said Vivek 
Ranadive, CEO and founder of 
TIBCO. "Success is no longer 
determined by how much infor- 
mation people can collect. If you 
have just a little bit of the right 
information beforehand — it 
could be two seconds, two min- 
utes or even two hours before- 
hand — it is more valuable than 
all the information in the world 
six months after the fact. We're 
giving our customers that critical 
two-second advantage." 

Version 4.0 of BusinessEv- 
ents, said Rourke McNamara, 
senior director of global product 
marketing for TIBCO, makes 
sense of the massive quantities 
of events that can pass through 
enterprise systems. "You need 
an infrastructure that can handle 
events at an Internet scale. 
That's billions of events per day 
flowing through your infrastruc- 
ture. BusinessEvents 4.0 lets 
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TIBCO announced the new tibbr communications platform, which aims to 
bring Twitter-like functionality to enterprise data and events processing. 



customers deploy tens of thou- 
sands of event-matching rules," 
he said. 

Version 4.0 lays the founda- 
tion for a number of new prod- 
ucts and updated offerings 
from TIBCO, said McNamara. 
By the end of 2010, he said that 
TIBCO will be introducing a 
new messaging system, dubbed 
FTL. He said that TIBCO 
"worked with Intel to take 
advantage of some of the break- 
throughs that have been made 
in multicore and networking 
technology." 

The Active Matrix develop- 
ment tools and environment 
also received an update. Active- 
Matrix 3.0 contains an update 



of TIBCO Business Studio (the 
company's Eclipse-based devel- 
opment environment), and the 
addition of Active Matrix BPM, 
a new business-process man- 
agement tool aimed at helping 
developers and businesspeople 
define the needs of their busi- 
ness environment. 

Finally, TIBCO announced 
tibbr, its social-networking 
inspired package of people- 
focused workflows, tibbr is 
designed to be a platform where 
relevant information finds the 
user, with the help of the Active- 
Matrix BPM tools. The new tib- 
br platform is still in develop- 
ment and no future release date 
was given for the software. I 



Symbian opens up tools for the Web 

Mobile operating system provider chases after Android, iPhone 



BY KATIE SERIGNESE 

To open its platform to a wider 
pool of developers, particularly 
Web developers, Symbian 
announced in late April the 
availability of its new Web 
application development tools. 

The open-source tools are 
built on top of the Eclipse 
JavaScript Debug Toolkit pro- 
ject and add mobile-specific 
capabilities to enable the transi- 
tion from desktop development 
to mobile development. The 
capabilities include mobile 
application previewing, debug- 
ging, project creation and 
mobile API support. 

With these new tools, any 
Web developer can apply exist- 
ing skills in CSS, HTML and 
JavaScript to create an applica- 



tion for the open-source mobile 
platform, Symbian 3. 

The non-profit organization 
took this approach to ease the 
creation of apps and widen the 
pool of developers for them, 
said Larry Berkin, head of glob- 
al alliances at Symbian. He also 
noted that there are a lot more 
Web developers out there than 
native developers. 

Despite still being the most 
widely used operating system in 
terms of the sheer numbers of 
phones using it, Symbian has 
fallen behind in popularity 
since the introduction of 
Apple's iPhone and Google's 
Android operating systems, said 
Theresa Lanowitz, CEO of 
technology analyst firm Voke. 

Lanowitz added, however, 



that she thought "[Symbian] 
always had a good road map" as 
far as development, but it lacks 
a connection with customers. 

Another way Symbian is 
trying to tap into the reservoir 
of Web developers is by offer- 
ing JavaScript APIs as a way to 
create robust applications. 
This will give developers a 
means to create more-capable 
applications with access to 
contacts, an accelerometer, a 
GPS and a camera, among oth- 
er features. 

The tools can be used on 
Linux, Mac OS X and Windows 
operating systems, and will sup- 
plement the Nokia-owned Qt 
framework that already sup- 
ports application development 
for the Symbian 3 platform. I 



NEWSlStoffS 



, NEW PRODUCTS , 



AppDynamics is offering a free troubleshooting tool for Java applica- 
tions running in production environments. AppDynamics Lite reports 
which business transactions are showing slow response; drills down 
into bad requests such as hotspots in code, stack traces for errors and 
stalled requests; and diagnoses at the code level to provide perfor- 
mance visibility into each class and method, as well as identifies slow 
SQL and external calls . . . Infragistics has released a set of custom 
libraries for automated testing of Windows application user interfaces. 
TestAdvantage for Windows Forms 2010 Vol. 1 is offered in two edi- 
tions, one that works with HP QuickTest Professional, the other for 
IBM Rational Functional Tester. The software let developers fully 
regression-test Windows Forms applications with user interfaces 
developed using Infragistics NetAdvantage Windows Forms controls 
. . . Software FX is offering PowerGadgets Mobile, an enterprise dash- 
board development system that lets companies access business infor- 
mation and displays key performance indicators on mobile devices 
based on Android, BlackBerry, iPhone or Windows Mobile . . . Hosting 
provider RepeatHost has launched a development hosting service for 
developers and software consultants that need a staging and produc- 
tion environment. The company also offers source-control hosting to 
let organizations deploy builds quickly, manage customer code, and 
take projects live with duplicate hardware on both the staging and pro- 
duction servers . . . Axosoft has launched RocketSVN for Visual Stu- 
dio, a plug-in that lets Subversion users access Subversion reposito- 
ries from inside the Visual Studio IDE. The plug-in also integrates with 
OnTime, Axosoft's project management suite. 



, UPDATES , 



Versatyle has updated its test automation software to work with Lab- 
VI EW, MATLAB and custom C++ programs. Testr3 Studio lets devel- 
opers reuse existing test automation infrastructure and incorporate 
them into the Testr3 Studio through a codeless module framework 
. . . McObject has updated its real-time embedded database to support 
custom collations and save databases in binary images. eXtremeDB 
4.1 offers faster on-disk storage and retrieval, CRC and RC4 encryp- 
tion, CRC-checking on database backup, and improved transaction log- 
ging . . . InstallAware has upgraded its eponymous setup-authoring 
tool for deploying products, patches and Web updates. InstallAware 9 
R2 creates Windows Installer setup packages for the latest versions of 
Microsoft's platforms, including Windows 7, SQL Server Express 2008 
R2, Windows Server 2008 R2 and 64-bit operating systems. New to 
this version is access from within the Visual Studio IDE, runtimes for 
.NET 4, and an upgrade path for both InstallShield and Wise users 
. . . Northwoods Software has updated its diagramming software for 
Java developers. JGo 5.4 improves support for creating thin-client 
Web applications using JGoWeb and JavaServer Pages. The software 
helps developers build applications that have interactive diagrams, 
such as flowcharts, state diagrams, networks, software design tools, 
workflow editors and other graphical displays . 



PEOPLE 



The ACM named Erich Gamma, Richard Helm, Ralph Johnson and 

(posthumously) John Vlissides recipients of the 2010 SIGSOFT (Spe- 
cial Interest Group on Software Engineering) Outstanding Research 
Award. Recognized for their contributions to the practice of software 
engineering, their book, "Design Patterns," explored the capabilities 
and pitfalls of object-oriented programming, and catalogued 23 spe- 
cific solutions to common design problems . . . Mary Lou Soffa, chair 
of the Department of Computer Science at the University of Virginia, 
was named by the ACM for the 2010 SIGSOFT Distinguished Service 
Award. Soffa is recognized for her service in the software engineering 
community and commitment to strengthening ties with her colleagues 
across the programming languages community . . . The Free Software 
Foundation has appointed Chris Hofstader as director of access tech- 
nology software for its GNU Project. The FSF has also published the 
GNU Accessibility Statement, a free initiative to create features for 
those with physical disabilities but can use an on-screen keyboard. I 
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Version 3.0 of the WS02 Governance Registry can locate services that are deployed in the cloud. 

WS02 middleware gains 
pluggable architecture 



BY DAVID WORTHINGTON 

A new release of WS02's open-source 
Web services middleware introduces a 
pluggable architecture where compo- 
nents are automatically added as 
required by services. 

Version 3.0 of the WS02 "Carbon" 
middleware platform was made available 
in May. The platform includes an ESB, 
the WS02 Web Services Application 
Server (WSAS), WS02 Governance Reg- 
istry 3.5 and WS02 Identity Server 3.0. 

WS02 retooled its products to follow 
the OSGi specification last year. OSGi 
implements a component model for the 
Java Virtual Machine to make Java more 
modular. 

That change permitted WS02 to build 
a component manager with a graphical 
controller for provisioning middleware. It 
manages dependencies by installing com- 
ponents that are related to a function. 

"If you choose a mediation, it finds 
the XSLT [XML transformations] com- 
ponent related to that and installs it as 
well," said Paul Fremantle, WS02's 



CTO. "It's like Eclipse for servers... 
There's just enough middleware." 

WS02 now uses Web Services 
Dynamic Discovery (WS -Discovery) to 
automate the detection and configuration 
of Web service endpoints in its registry. 
That change makes it easier to locate ser- 
vices in a cloud platform, where a service 
may not be located at the same place 
each time, Fremantle explained. 

Additional changes are priority-based 
mediation and more deployment options 
for the ESB. Developers can write cus- 
tom logic for categorizing work, Freman- 
tle said. Departments can manage their 
own deployments of components. 

WSAS has a new dashboard with 
impact analysis gadgets and an integrat- 
ed XML editor, and developers may now 
write service life-cycle processes in 
JavaScript. 

Carbon middleware products may be 
deployed as cloud- ready images in Ama- 
zon or Linux Kernel-based Virtual 
Machines, or in VMware formats. Pric- 
ing is dependent upon support plans. I 



Windows 7 Embedded adds modules 



BY DAVID WORTHINGTON 

Windows Embedded 7 Standard, an 
embedded edition of Windows 7, intro- 
duces new multimedia modules, energy 
saving options, and management capa- 
bilities for specialized enterprise and 
consumer devices. 

Microsoft shipped Windows Embed- 
ded 7 Standard in late April at the 
Embedded Systems Conference in San 
Jose. Several of its partner's solutions 
and its own reference hardware were 
demonstrated during the conference. 

Those included multi-touch kiosks 
built with Intel hardware, industrial 
automation products from Siemens as 
well as Microsoft's concept of set-top 
boxes for integrating PC and Web-based 



multimedia with televisions. Partners 
have been working with Windows 
Embedded 7 since September, when a 
preview version was released. 

The focus of Microsoft's embedded 
products has been on enterprise-class 
devices, but Microsoft is now targeting 
the consumer marketplace, said Ashwin 
Kulkarni, senior product manager for 
Windows Embedded. 

Developers also have access to Win- 
dows 7's multi-touch, Windows Flip 3D 
navigation and Windows Aero user 
interfaces. 

The core product footprint is 400MB, 
Kulkarni said. Microsoft's development 
tools take dependencies into account as 
images are created, he said. I 
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Apache projects step out on their own 



BY ALEX HANDY 

The Apache Incubator is getting 
Hadoop-heavy. The Apache 
Software Foundation in May 
graduated a number of projects 
within that realm to its incubator. 
Meanwhile, the Apache Traffic 
Server, a caching proxy server, 
moved up to become a top-level 
project at the Foundation. 

"Becoming a Top-Level Pro- 
ject is a vote of confidence from 
the Foundation at large, 
demonstrating a project has 
proven its ability to be properly 
self-governed," said Foundation 
chairman Jim Jagielski. "We are 
proud of our Committers' dedi- 
cation in building robust com- 
munities under the ASF process 
known as The Apache Way.' " 

The new class of Apache 
Incubator projects are all for- 
mer sub-projects of existing 
hatchling projects. This year's 
class consisted of three former 
Lucene sub-projects and two 
former Hadoop sub-projects. 

From Hadoop comes Avro 
and HBase, two projects aimed 
at expanding the capabilities of 
the Hadoop platform. 

HBase is aimed at building 
something similar to Google's 
Big Table inside of Hadoop. It 
gives Hadoop random 
read/write access to tables with 
potentially billions of rows. 
Avro is a fast data serialization 
system for Hadoop. 

The remaining three new 
projects are Mahout, Nutch 
and Tika. Nutch is a Web 
search engine based on and for- 
merly a sub-project of Lucene; 
Tika is used to detect data types 
and provide analysis thereof. 

Mahout, an effort to build 
artificial intelligence construc- 
tion tools for Hadoop, is now a 
separate incubator project. 
Mahout 0.3, which came out in 
March, added a number of new 
parallel algorithms for recog- 
nizing text and adding pattern 
recognition primitives to appli- 
cations. 

Grant Ingersoll, cofounder 
of Mahout and Lucene compa- 
ny Lucid Imagination, said that 
Mahout is aimed at replicating 
some of the basic building 
blocks needed to build intelli- 
gent systems based on non- 
structured data sets. 

"Our main algorithms, now, 
are around clustering and cate- 
gorization," he said, describing 
the capabilities of Mahout. "We 
also added in frequent pattern 



mining and collaborative filter- 
ing for what some people call 
recommendation systems. We've 
also got some evolutionary capa- 
bilities as well." 

Earlier this year, the Apache 



Software Foundation created 
five new top-level projects, one 
of which is also associated with 
Hadoop: the Apache Unstruc- 
tured Information Management 
Architecture (UIMA). The 



UIMA project was originally 
created by IBM and was donat- 
ed to the Apache Foundation in 
2006 as an incubator project. 
UIMA is a framework for ana- 
lyzing unstructured data sets, 



such as natural language texts. 

The Apache Cassandra pro- 
ject also became a top-level 
project in April of 2010. This 
NoSQL distributed database 
was recently updated to version 
0.6.1, and gained the ability to 
push information stored in Cas- 
sandra into running Hadoop 
clusters. I 




>R 



Build Your Applications with Delphi and Get: 



> RAD JDE with fast drag-and-drop design 

> More than 250+ Visua! Component Library 
controls 

> Built-in touch and gesturing support 

> dbExpress™ with support for 9 
major databases 

> DataSnap® n-tier middleware 
withJSON, REST, HTTP, 
COM r and XML 



> Target Windows* 1 2000 H XP, Vista , and 

Windows 7 from single source 

> U ML /code metrics and audits 

> Centralized license management with 
Embarcadero* Too IC loud* 



O 



Delphi 



> Rich technology ecosystem 
with thousands of 
commercial and open-source 
tools and components 



The Fastest Way to 

Build Native Windows 
Applications 



Vfsit the Application Showcase 

and Get a Free Trial" wwvw.sinbarcadero.com/appshowcase 



embarcadero 



C 201 EmtwrcDUBfa Taehndtfgics. \nt. M IrnUemorits i 



nsprct-.vi! awinra 



10 



NEWS 



■ Software Development Times . June 1 r 2010 . 



www.sdtimes.com 



Apprenda middleware takes up multi-tenancy in the cloud 

SaaSGrid Express provides free app platform that broadens access, scalability 



BY DAVID RUBINSTEIN 

Cloud offerings are largely verti- 
calized silos of infrastructure, 
hosting services and even lan- 
guages, said Sinclair Schuller, 
CEO and cofounder of software- 
as-a-service provider Apprenda. 
But the future, he said, will see 
the application server architec- 
ture evolve and move to the 
cloud, creating a horizontal layer 
that broadens access and scales 
in a cost-efficient manner. 

"Organizations won't throw 
out their Java and .NET applica- 
tions, so they realize they have to 
do something more" to get these 
applications leveraging the 
advantages of cloud deployment, 
Schuller said. Using the example 
of the recently announced 
VMforce cloud effort between 
Salesforce and VMware, he said, 
"Things are still very tightly cou- 
pled with clear dependencies on 
the Force back end." 

Middleware in the cloud, 
Schuller explained, handles such 
issues as data access and 
retrieval at that layer. By cou- 
pling middleware and multi-ten- 
ancy, components can be virtual- 
ized "so data from multiple 
customers can reside in a single 
database," he said. "Applications 
execute in a single instance but 
flow orthogonally." Multiple 
instances of an application don't 
know they're sharing a single 
instance of a database or data 
component, he said. 

Apprenda aims to democra- 
tize this high-end architecture 
with the June release of SaaS- 
Grid Express, a free, download- 
able version of the company's 
SaaSGrid application server. The 
free tool has the main functional- 
ity of the app server product, and 
offers multi-tenancy and grid 
scalability, said Schuller. 

"You won't see broad ISV 
adoption of the cloud without 
the infrastructure to scale," he 
claimed. "Would you rather have 
the architecture share 1,000 cus- 
tomers across 1,000 servers, or 
100 servers?" 

By virtualizing the cloud 
stack, Apprenda is looking to 
lower cost dynamics to make the 
cloud a better option. "How soft- 
ware is written has implications 
on cost," Schuller said. "You 
want as few cents on the dollar 
spent on the service." 

Most people moving to SaaS 
have to scale for capacity, and 



cloud providers have to figure 
out how to offer the service 
cheaply, or movement to the 
cloud will be held back, he said. 



SaaSGrid Express offers such 
services as application metering, 
monetization, subscription man- 
agement and application life- 



cycle management, according to 
the product announcement. 

Apprenda cited Gartner 
research that predicted the mar- 



ket for SaaS applications will 
reach US$14 billion by the end 
of 2013, making up 14% of the 
enterprise application market. I 
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Big Lever gets ALM, PLM in gear 

Product configurator offers graphical views of feature reguirements 



BY DAVID RUBINSTEIN 

The worlds of software prod- 
uct-line engineering, applica- 
tion life-cycle management 
and product life-cycle man- 



agement are converging, as 
the costs of software and hard- 
ware reach parity and as soft- 
ware becomes a more impor- 
tant factor for differentiation 



and innovation in physical 
products. 

With 16% growth per year in 
product lines and product 
scope counterbalanced with the 



decreasing size of engineering 
teams, the need for efficiencies 
in development processes and 
asset management become 
even more marked, according 
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to Charles Krueger, CEO of 
BigLever Software. The com- 
pany makes Gears, a product 
feature configurator that helps 
bring together engineers and 
the business side to advance the 
product line. 

Krueger noted that devel- 
opment tools support engi- 
neers, and dissonance occurs 
when businesspeople try to 
interact. Being able to roll out 
a product with new features in 
a competitive manner is "an 
organizational transformation; 
it's not only a tool issue devel- 
opers would care about," he 
said. 

BigLever is releasing Gears 
6.1 with a graphical feature 
model that businesspeople can 
understand and that meets 
engineers on a middle ground, 
Krueger explained. "The engi- 
neer's view of a feature model 
was in data declarations. That 
was not an efficient means of 
communication for business- 
people." 

Gears 6.1 provides a graphi- 
cal view of decision trees in 
which brand and feature choic- 
es can be made, where engi- 
neering can see if the necessary 
features exist, and where those 
features are. For the business, 
the benefits of SPL are econo- 
my of scale, cost savings from 
efficiency, faster time to market 
and profits, and better quality, 
Krueger said. 

This three-way conver- 
gence of product-line engi- 
neering, application life-cycle 
management and product 
management has led to the 
disabuse of the notion that 
SPL is associated with water- 
fall development methods. "In 
a product-line scenario, things 
are changing in the product 
line," said Krueger. "New 
products need new features, 
or certain features need to be 
extended to other products. 
You have to be agile in an SPL 
world. Business and engineer- 
ing have to dance together in a 
way that's very agile." 

The new release of Gears 
brings an enhanced code edi- 
tor used by developers for 
expressing variation points in 
code with graphical represen- 
tations of the requirements, 
code or test-case variations, 
Krueger said. Gears can be 
told that if feature X is includ- 
ed in a particular product mod- 
el, that a certain requirement 
must also be included, he 
added. Gears integrates with 
third-party requirements tools, 
editors and code repositories. I 
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SpringSource to buy GemStone Systems 



BY ALEX HANDY 

SpringSource in May announced 
that it will acquire privately held 
GemStone Systems, with the 
idea of integrating that compa- 
ny's distributed caching data fab- 



ric into SpringSource s cloud-tar- 
geted Java stacks. The terms of 
the deal were not disclosed. 

Rod Johnson, general man- 
ager of VMware's Spring- 
Source division, said that the 



GemStone acquisition is 
intended to round out the 
VMware Java middleware 
portfolio. In March, Spring- 
Source acquired RabbitMQ, a 
company that supports the 



Advanced Message Queuing 
Protocol implementation. 

"Fundamentally, we're build- 
ing out our middleware capabil- 
ities, but we're doing it with an 
eye towards what we think of as 
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next-generation middleware," 
said Johnson. "We're choosing 
things like our TC Server prod- 
uct, GemStone and RabbitMQ 
that are highly relevant to solv- 
ing the new problems of cloud 
deployment." 

Johnson went on to state 
that this acquisition will help 
developers to deal with data 
management in live applica- 
tions. "We think data manage- 
ment is becoming increasingly 
important. As you move to 
cloud, you potentially have dif- 
ferent data stores underneath. 
You need to scale that to a 
degree that's problematic for 
relational databases," he said. 

One alternative to relational 
databases has been the NoSQL 
movement, but that doesn't 
mean NoSQL is the only 
answer. Johnson said that 
caching is an ideal solution for 
enterprises, as the transaction- 
al limits on NoSQL databases 
are prohibitive for large busi- 
nesses with complex Java 
applications. He said that using 
a caching layer like Gem- 
Stone's data fabrics can allow 
data stored in relational data- 
bases to scale similarly to 
NoSQL's, but without remov- 
ing the benefits of a relational 
database. 

Richard Lamb, CEO of 
GemStone, said that the biggest 
benefit of this acquisition will be 
the opportunity it provides his 
company to refine the develop- 
er-facing end of its products. 

He added that GemStone 
has been focused on "building 
the maturity and the reliability 
of the product. The ease of use 
has not been one of our top pri- 
orities. With Spring, we will 
bring that to this very com- 
pelling technology." 

Lamb said that the Spring 
framework brings simplicity 
and ease of use to enterprise 
Java developers, and he hoped 
it would extend these benefits 
to Gem Stone's products. 

Johnson and Lamb agreed 
that SpringSource would be 
building tools for dealing with 
GemStone before the end of 
the year. Johnson also said that 
Gem Stone's data fabric layers 
will become a part of Spring- 
Source and VMware's Java 
cloud stacks. Finally, he added 
that SpringSource's TC Server 
will soon offer support for using 
GemStone software to replicate 
data across Tomcat clusters. I 
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Gnoso updates test tool for .NET 4.0 

NCover tool also has Team Foundation Server add-on, better collaboration 



BY KATIE SERIGNESE 

Gnoso, a maker of code cover- 
age tools, released in May ver- 
sion 3.4 of NCover, its code- 
analysis tool. Highlights of the 
latest version are added sup- 
port for .NET 4.0, including 
an add-on to Microsoft Visual 
Studio Team Foundation Serv- 
er, better collaboration for the 
development team, and deep- 
er insight into code health. 

In its essence, NCover 3.4 
is a tool used to analyze tested 
code and its complexities to 
ensure code quality. It also 
analyzes and monitors testing 
throughout the entire software 
development process, "provid- 
ing a holistic view of the health 
of the code," said Daniel 
Waldschmidt, Gnoso's tech- 
nology evangelist for code cov- 
erage tools. 

Of how it works, he 
explained, "[NCover] provides 
a comparable analysis of tested 
code to cyclomatic complexity 
at any stage in development, 
reducing failed customer inter- 
actions and dramatically reduc- 
ing the costs of the entire 
process." He also added that 
this is the first analysis tool to 
test like this in the .NET frame- 
work. 

After analysis, NCover pro- 
duces reports, which include 
the code's cyclomatic complex- 
ity (a measurement of the 
number of linearly indepen- 
dent paths through a program's 
source code). Based on that 
information, development 
managers can then measure 
the risk in a project based on 
complexity and coverage. 
Waldschmidt cited Microsoft 
research that found deeper 
insight into complex code is 
needed because "more com- 
plex code needs more testing." 

The reports also show what 
was and wasn't tested, because 
"knowing what you've tested is 
just as important as testing," 
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Waldschmidt said. "You can 
sometimes test only 10% of an 
app and not know." 

For better collaboration, 
NCover also merges testing 



reports done on the desktop, 
build server and in QA. This 
feature will show if something 
was already tested and where, 
Waldschmidt said. "Right now, 



testing is very siloed and 
[NCover] helps collaboration." 
NCover also covers a larger 
number of apps and tools with 
one-click access to HP Quick- 



Test Professional software. Ver- 
sion 3.4 is exclusive to NCover 
Complete and costs US$658 per 
user, per year. A 21-day free tri- 
al is also available. I 
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SAP agrees to purchase Sybase for $5.8 billion 

Deal allows database company to operate as a standalone unit 



< continued from page 1 

The acquisition also broad- 
ens Sybase's capacity to devel- 
op new solutions for analytics. 



It will gain access to SAP's in- 
memory database technology 
significantly increasing the 
performance of its analytics 



and complex event processing 
software, as well as enabling it 
to build those capabilities into 
its transactional products, Wil- 



son stated. 

"The move also furthers 
SAP's strategy of supporting 
customers' heterogeneous IT 




environments, because Sybase's 
anytime/anywhere/any applica- 
tion approach has resulted in a 
platform that is versatile 
enough to connect and mobi- 
lize a wide variety of applica- 
tions and data, both SAP and 
non-SAP," said Wilson. 

SYBASE'S PAST, PRESENT 

Sybase, founded in 1984 as 
Systemware, began as a data- 
base software maker compet- 
ing with firms like IBM, 
Informix and Oracle. The 
company's main product, 
called SQL Server, was origi- 
nally offered for Unix. 

Sybase worked with 
Microsoft to port SQL Server 
to OS/2 and Windows NT. Both 
companies marketed and 
expanded the Windows version; 
Microsoft SQL Server grew 
into a dominant player in the 
database industry, while Sybase 
SQL Server fell behind. 

The companies have since 
taken their database product 
lines in different directions; 
Sybase now calls its database 
Adaptive Server Enterprise. 

Since the late 1990s, Sybase 
has reinvented itself as a 
provider of tools for building 
applications and delivering data 
to mobile devices. 

In 2006, Sybase acquired 
Mobile 365, a mobile messag- 
ing company that handles over 
1.5 billion messages per day, 
ranging from alerts and promo- 
tions to transactions, according 
to Datamonitor. Mobile 365 
has relationships with more 
than 850 mobile providers cov- 
ering more than 4 million sub- 
scribers. 

In buying Sybase, SAP has 
substantially strengthened its 
hand in mobile applications, 
Wilson said. Sybase's platform 
provides versatile deployment 
options for mobile applica- 
tions across BlackBerry, 
iPhone and Windows Mobile 
devices. 

The combination of SAP and 
Sybase is a "transformative 
event" for the software indus- 
try, "revolutionizing" how trans- 
actional and analytic applica- 
tions are built, Sybase's Chen 
said in a statement. Allowing 
customers to run their business 
from many devices will drive 
enterprise productivity, he 
added. I 
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Rhomobile brings back end to mobile framework 



BY DAVID WORTHINGTON 

Rhomobile has added the ability 
to write reusable applications to 
synchronize smartphones with 
back-end systems to its Rhodes 
open-source mobile develop- 
ment framework. 



The release also introduces 
new technology for building 
conferencing applications. 

Rhomobile, founded in 2008 
by Mobio and Systinet alumni, 
released a public beta of Rhodes 
2.0. Rhodes is available for free 



under the MIT software license 
with copyleft requirements. 

Rhodes 2.0 introduces a 
metadata framework that 
enables mobile applications to 
communicate with enterprise 
CRM deployments that have 



changing schemas. Changes that 
are made to schemas are imme- 
diately reflected in any mobile 
applications built using Rhodes. 
"All forms are dynamically 
generated," said CEO Adam 
Blum. Most smartphone applica- 
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FusionCharts I from $195.02 



InfoSoft Global 



Interactive charts, gauges & maps for ASP and ASP.NET apps. 

• Liven up your Web applications using animated Flash charts 

• Create AJAX-enabled charts that can change at client-side without invoking server requests 

• Export charts as images/PDF and data as CSV for use in reporting 

• Also create gauges, financial charts, Gantt charts, funnel charts and over 550 maps 

• Used by over 1 5,000 customers and 250,000 users in 1 1 countries 



DXperience Enterprise from $1,234.99 
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All DevExpress ASP.NET, WinForms and IDE Productivity Tools in one package. 

• 1 2 month subscription provides all Developer Express releases including current and new 
products, product upgrades and access to all betas in active development 

• Components and tools include grids, data entry, data analysis, charting, navigation/layout, 
planning/scheduling, reporting solutions, printing libraries, code writing tools, refactoring 
tools and ORM libraries 



ActiveReports 6 from $664.05 
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Latest release of the best selling royalty free .NET report writer. 

• Now supports Windows Server 2008, 64Bit & IE8.0 

• First Flash based Report Viewer for end users 

• Supports PDF Digital Signatures, RSS Bar Codes and external stylesheets 

• Features an easy-to-use Visual Studio report designer and a powerful API 

• Offers seamless run-time deployment, royalty free. 



Asia/ Pacific Headquarters 



3F Kojimachi Square Bldg 
3-3 Kojimachi Chiyoda-ku 



Sales Hotline - US & Canada: 

(888) 850-991 1 

www.componentsource.com 
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tions are built for a given compa- 
ny's CRM application, he added. 
"This is the biggest stumbling 
block I think enterprises have to 
getting [CRM solutions] to the 
smartphone." 

Rhomobile is also targeting 
the enterprise with bidirectional 
audio and video streaming, 
which requires customers to 
purchase a media server. 

Rhodes applications are writ- 
ten in HTML and Ruby, but run 
natively on Android, BlackBerry, 
iPhone, Symbian and Windows 
Mobile devices. The framework 
includes binaries that abstract 
away each underlying platform, 
and developers use a single API 
to access native resources. 

This release includes updated 
styling libraries for Android, 
BlackBerry and Windows 
Mobile applications. 

A SaaS edition of Rhodes 
with preconfigured SDKs for 
supported smartphones is avail- 
able starting at US$20 a month. 
The final release of Rhodes 2.0 
was scheduled for late May. I 

Kapow takes 
Web data retrieval 
to enterprise scale 

BY DAVID WORTHINGTON 

Kapow Web Data Server 7.2, 
released in May, features a new 
design studio for users to devel- 
op, test, deploy and manage 
data services. It includes a 
headless browser that gives the 
IDE Document Object Model 
access to break down Web 
pages into code definitions. 

The code definitions are 
used to program modules to 
navigate a website and pro- 
grammatically retrieve its data. 
Kapow Web Data Server 
expands supported data types 
with support for XML feeds. 

"It's not just accessing 
HTML pages. You can extract 
and transform data from any 
XML data source on the Web," 
said Stefan Andreasen, Kapow's 
founder and CTO. 

A new data viewer allows 
business users to review collect- 
ed data with any browser, and 
data retrieval can be set using a 
Web-based scheduling inter- 
face. 

The release also adds direct 
access to secure FTP directo- 
ries as a service repository, as 
well as production monitoring 
and notifications. I 
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Microsoft loses patent challenge 



< continued from page 1 

ing against their validity. The 
patents were upheld in May, 
instead. 

Microsoft vows to forge on 
and is considering its legal 
options, including a petition to 
the Supreme Court, said Kevin 
Kutz, director of public affairs 
for Microsoft, in a statement. 

However, Microsoft's defense 
may be a long shot. "I think they 
win at the Federal Circuit and in 
the PTO; it makes these patents 
very hard to challenge on validi- 
ty grounds," said Mark A. Lem- 
ley, a professor of law at Stanford 
Law School and director of Stan- 
ford's program in law, science 
and technology. 

Last year, i4i filed suit against 
Microsoft in the U.S. District 
Court, Eastern District of Texas 
for using the technology in 
Office's Custom XML feature. 
i4i won the judgment in August 
2009, and the court issued an 
injunction against the sale of 
Microsoft Office 2003 and 2007, 
prompting Microsoft to release 
a patch to strip the offending 

IBM to acquire 
Cast Iron Systems 
for cloud boost 

BY DAVID RUBINSTEIN 

IBM announced the acquisition 
of Cast Iron Systems to help 
grow its cloud-computing offer- 
ing. Cast Iron builds integration 
software that enables applica- 
tions running in a cloud to access 
applications in the data center. 

IBM predicts the global 
cloud market will grow to 
US$126 billion in 2012. Cast 
Iron's software will be added to 
IBM's business process and inte- 
gration software portfolio. 

Cast Iron has developed hun- 
dreds of rebuilt templates, which 
can be used to eliminate expen- 
sive custom coding and can 
reduce the amount of time to 
complete integrations, IBM said. 

"The integration challenges 
Cast Iron Systems is tackling are 
crucial to clients who are looking 
to adopt alternative delivery 
models to manage their busi- 
nesses," said Craig Hayman, 
general manager at IBM Web- 
Sphere. "The combination of 
IBM and Cast Iron Systems will 
make it easy for clients to inte- 
grate business applications, no 
matter where those applications 
reside." I 



functionality from its products. 

The patch removed Word's 
ability to read Custom XML 
elements contained within 
docx, docm or XML files. 

"These files will continue to 
open, but any Custom XML 



elements will be removed," the 
company said. The patch was 
made available to PC OEMs for 
their customers. 

Microsoft filed an appeal, 
only to be denied in December 
2009. Ultimately, a federal 



appeals court ordered it to pay 
i4i US$290 million in damages. 
Summing up the experience, 
Loudon Owen, chairman of i4i, 
stated, "Put simply, i4i's patent is 
clearly and unequivocally valid. 
Even though Microsoft attacked 



i4i's patent claims with its full 
arsenal, the Patent Office 
agreed with i4i and confirmed 
the validity of our '449' patent. 

"The protection of patents 
and intellectual property is 
vital to small inventors and pio- 
neers, like i4i, especially when 
confronted by giant industry 
competitors like Microsoft." I 
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StyleVision® - graphical stylesheet & electronic forms designer 
Drag-and-drop XSLT 1.0/2.0 and XSL-FO stylesheet design 

• Precise electronic forms design 

• Advanced CSS and JavaScript functionality 

XMLSpy® - advanced XML editor 

• XSLT 1.0/2.0 editing, debugging, and profiling 
• XSLT editing help, support for program code in stylesheets 

DiffDog® - XML-aware diff / merge utility 
• File, folder, directory, DB comparison and merging 
One-click directory syncing 
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Adaptation is key to API evolution 



< continued from page 1 

Ramji said that companies 
need to understand what devel- 
opers want if they hope to 
evolve their APIs. He said that 
well-designed APIs with dedi- 
cated support will draw devel- 



opers like finches to a feeder. 

"In an API, [developers] want 
straightforward REST. They 
want nothing weird in the XML 
or JSON," said Ramji. "They 
want totally standard security. 
They don't want session-based 



authentication. Use HTTPS and 
use OAUTH. If you have to pick 
between writing documentation 
or writing sample code, get the 
sample code out there. Show me 
how its used in context and I can 
figure out the rest." 



Mashery, another API man- 
agement company, administered 
a survey to 569 attendees at the 
Web and media-focused SXSW 
conference earlier this year. It 
found that developers prefer 
well-documented, simple APIs 



Agile, Your Way. 





XP. 
Iterative 



Feature-Driven | 

Test-Driven 

Waterfall" 



The Best Agile Solution For Your Team 
is a Balanced Approach 

Agile has moved into the mainstream of software development, but tt>e implementation details are otteo adapted to 
each organization's unique needs and pnoriiies Agile Studio enables you to mix practices from multiple Agile 
methods, as well as elements from traditional development, to create the test balanced approach for your team. 
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Tech Excel Agile Studio 

- The Platform for Balanced Agile Development 



www.techexcel.com 

1-800-439-7782 



similar to those offered by Ama- 
zon, Google and Twitter Delyn 
Simons, director of platform 
strategies and developer rela- 
tions at Mashery, also said that 
most Web developers building 
with APIs aren't doing it for busi- 
ness, but for pleasure. 

When asked why they devel- 
oped with APIs, "Two-thirds of 
the people who responded cited 
reasons other than 'my employer 
pays me,"' said Simons. 

Another issue for developers 
in the Mashery survey was stabil- 
ity. Simons said that developers 
wanted APIs to remain static, as 
changes in behavior can break 
applications built on APIs. She 
also said that developers were 
currently focused on mobile 
devices, perhaps because of their 
easy path to monetization. 

Ramji cited Apple's iPhone 
App store as the model way to 
give developers incentives. "If 
you have a business model, let 
[developers] in on it. Don't 
charge me to use your API. 
Look at me as the person spend- 
ing my time building a cool 
application that will get you in 
touch with new users you never 
knew were there," he said. 

Simons then said that unusu- 
al companies are now getting 
into the API market; Hallmark 
launched an API in April, and 
even The New York Times now 
has its own developer interfaces. 

And that, said Ramji, puts 
developers between customers 
and businesses. Companies can 
engage their customers in new 
and interesting ways using APIs, 
but that won't happen without 
care and support of those APIs. 

"Show that you are listening 
by changing your API in 
response to the questions 
[developers] are asking," said 
Ramji. "In your first attempt, 
you're going to get the API 
wrong as a provider, guaranteed. 
You have to get it incrementally 
less wrong by listening to the 
developers in your community." 

What should be a concern is 
proper management of APIs. 
That's an emerging space for 
ISVs, said James Governor, ana- 
lyst at RedMonk. 

"Ultimately, API manage- 
ment is going to be as important 
as the relational database man- 
agement wave was," he said. "If 
you think about the role of the 
DBA, all the performance issues 
had to be dealt with by the 
DBA; access to data structures 
had to be done by the DBA. I 
see this new role emerging in 
API management being equiva- 
lent to the DBA emerging." I 
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Introducing Time-lapse View, 

a productivity feature of Perforce SCM, 
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Perforce lime-Lapse View 



Ti mo -lapse View lots developers see every edit over made to a file in □ 
dynamic, annotated display. At long lost developers can qukkly find answers 
to questions such as: 'Who wrote this code, and when?' and 'What content 
got changed, and why?* 

Time -lapse View features a graphical timeline that visually recreates the 
evolution of a file, change by change, in one fluid display Color gradations 
mark the aging of file contents, and the display's lime tine can bo configured 
to show changes by revision number, dote, or chongeset number. 

Time-lapse View is fust one of the many productivity tools that come with the 
Perforce SCM System. 



Perforce 

SOFTWARE 



Download a free copy of Perforce, no questions 

asked, from www.perforce.com. Free technical support is 
available throughout your evaluation. 
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Congratulations to the 3,000+ 

These companies have made their applications compatible with 
Windows 7 using the no cost technical support and gained access 
to customized marketing materials made available to them 
through the Front Runner for Windows 7 program. 
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Ravenflow puts 
requirements 
authoring into 
cloud systems 

BY DAVID WORTHINGTON 

Ravenflow has devised a requirements 
authoring service for the "technically 
challenged." A new SaaS offering called 
RAVEN Cloud takes written require- 
ments and transforms them into dia- 
grams. 

RAVEN Cloud entered beta in May 
and will launch in the fall as a subscrip- 
tion service with several different tiers of 
functionality said Ravenflow president 
and CEO Susan Boers. The company's 
objective is to have a low cost of entry, 
she explained. 

The service converts text into dia- 
grams using a natural language process- 
ing engine. Business analysts need only 
to write a grammatically correct sen- 
tence; they do no need to preprogram 
words, said vice president of operations 
Jim Sciarra. 

The service has a Silverlight front 
end and uses Windows Azure as its back- 
end service platform. 




RAVEN Cloud's processing engine can convert text into diagrams. 



RAVEN Cloud automatically identi- 
fies process errors, and future versions 
will dynamically link errors in diagrams 
to any offending text. It will also gener- 
ate a list of actors and objects from the 
text, which is a prelude to a glossary in 
the subscription services, Sciarra said. 

More than 50 requirements tem- 
plates are included in the beta, which 
may be edited. The company is consid- 
ering private cloud editions of the ser- 
vice that come with customized process 
templates for their specific verticals, 
Boers said. 

Over time, the full feature set of 



RAVEN Professional will be migrated to 
the cloud service. There are plans to 
allow customers to export requirements 
to Office file formats, as well as Business 
Process Modeling Notation (BPMN) 
and UML tools. The free beta exports 
diagrams as JPEG images that are e- 
mailed to users. 

Ravenflow, an IBM partner, is work- 
ing with partners in the ALM and BPMN 
space to export diagrams into down- 
stream tools, Boers said. It has built inte- 
grations for IBM Rational Requirements 
Composer and IBM Rational DOORS in 
its existing on-premises software. I 



USING A VIRTUAL 
AVATAR FOR TESTING 

BY KATIE SERIGNESE 

Automation Anywhere, a provider of 
automation and testing software, 
launched its newest version of Testing 
Anywhere in late May, with a new object- 
based testing tool called Object Avatar. 

The tool automatically identifies new 
screens and objects (or objects specified 
by the user) from a live application, which 
are then captured in a test case and placed 
into Testing Anywheres repository. The 
live application is essentially virtualized, 
forming the "Avatar" for the identification 
and modification of objects. 

Because complex apps with a lot of 
components require more test time, "This 
tool lets you know where to go ahead of 
time instead of going through page after 
page of an application, ultimately reduc- 
ing the time and money spent developing 
and modifying the live application itself," 
said Mihir Shukla, cofounder and CEO of 
Automation Anywhere. 

Testing Anywhere also allows for 
automating tests for controls, languages 
and websites. The testing software is avail- 
able as a desktop version for US$2,500 
per individual license, or as a team edition 
that includes its collaboration server and 
one user license for $7,000. All user 
licenses thereafter are $2,500. I 
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Crowdsourcing testing platform gets new Ul 

New rating system, cycle wizards also featured in latest collaboration tool update 



BY KATIE SERIGNESE 

Massachusetts-based software 
testing startup uTest in May 
launched the third generation 
of its crowdsource software 
testing platform. Version 3.0 of 
includes an enhanced tester 
rating system, a new collabora- 
tion tool, a revamped user 
interface and new test-cycle 
wizards to enhance both cus- 
tomer and tester experiences. 

uTest's platform provides 
crowdsource testing services to 
independent software vendors 
and others creating software that 
use the "crowd" to find bugs. 
Matt Johnston, uTest s vice pres- 
ident of marketing and commu- 
nity, defined crowdsourcing as 
the "notion of outsourcing to an 
online community." 

To offer customers more visi- 
bility into uTest s community of 
more than 25,000 testers, an 
enhanced tester rating system 
was released. With this feature, 
customers can see a tester's 
"reputation" on the site based on 
past participation in and com- 



:"fc7«r ™.=»- in.. 









Mil-tart 






1 rMMtM lilt 
n V.I U hlUIJ MI..1.!. 


■■■— ■ ■ 


fr 
















k* 












■* 




■ 


• llRH UM1TU>7iE| 




' 1 JllMJll 










i QiJnirRni H 


M 


'Hmmffl 








■ ..in ,_^_ 






1 r*y.*f.w**+ 1 1« -r*~ ^ 

IIWMMIM 

■ -ta .J am bu. y _■> u 




ii 



















j- L&H4&£LL4 



Customers can reject, approve or ask for more information when a bug is 
reported by a tester. 



pletions of tests, as well as his or 
her overall activity on past pro- 
jects. After assessing a testers 
participation by how accurately 
he or she clarifies the type and 
severity of bugs, among other 
things, he or she is given a gold, 
silver or bronze tester badge for 
customers to see. 

Testers are also asked to fill 



out personal and technical pro- 
files when joining the communi- 
ty, Johnston said. This ensures 
that costumers are linked with 
the best tester for their project, 
based on demographics and 
experiences, he added. 

For better collaboration 
between customers, testers and 
the uTest project manager, the 



release also offers a collection of 
new messaging tools, called The 
Tester Messenger. This feature 
helps customers get more infor- 
mation about any bug by mark- 
ing it as "Need More Info." The 
tester that reported the bug is 
then informed of the request, 
and based on the tester's 
response, the customer can 
either mark the bug to be fixed 
or allow it to be ignored if it's not 
deemed critical. 

A new user interface is 
included in the release, and it 
enables more intuitive cus- 
tomer and tester experiences. 
For testers, the interface 
enables easier navigation from 
bug to bug and project to pro- 
ject. Tables or lists can be 
resized or rearranged and easily 
filtered to find the exact infor- 
mation the user needs. 

"For customers, it offers 
enormous benefits because it 
enables quick and easy bug 
triage by QA managers," John- 
ston said, adding, "This reduces 
the overhead of reviewing bug 



reports from the testing commu- 
nity and making it easier to find 
those 'showstopper' bugs among 
a long list of reported defects." 

Other additions to the testing 
platform include new test-cycle 
wizards. The creation wizards 
help customers create projects, 
select the right testers (depend- 
ing on their needs), and ensure 
each part of the test is well doc- 
umented based on the cus- 
tomer's specifications. Testers 
can use an intuitive wizard to 
review test cycles, report bugs 
and communicate with uTest or 
other testers. Additionally, in 
order for uTest to expand its test 
services, the release also 
includes new open APIs. 

Testers can join the uTest 
crowdsource community for 
free, and customers pay per 
project per test cycle, which are 
typically three to seven days, 
Johnston said. Of crowdsource 
testing and its benefits, he said, 
"There is only so much you can 
automate, and this is ideal for 
complimenting auto-testing." I 
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ComponentOne's DataGrid, Chart, and Maps are the only 
Web Parts that give you a point-and-click interface to select the 
data sources and completely configure how the data is displayed. 
You can also connect to all popular data sources. And the design 
experience is not only fast, it doesn't require developers. Imagine 
having the power to create impressive data-based portals in 
minutes, without writing any code! 
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Studio for SharePoint 

Download Your Free Trial @ 
www.componentone.com/webparts 
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Mastering iPhone OS 4.0: What's New, What's Changed 

Mobile Data Synchronization with Any Database 

Creating an Easy-To-Use Objective-C Modular Framework 

Ship Your App Now by Creating Hybrid Applications 

iPhoneify Your Web App: Understanding iPhone Web Development 

TheTricorder Is Here: Math and Science on the iPhone/iPad 

Developing Effective Enterprise Smartphone Apps 

The Science of Making a Successful Free App 

Marketing in the Social Media APPmosphere 

Everything You Wanted to Know About UlTableView 

Programming Using CoreLocation for GPS and Magnetometer 

iPhone/iPad Networking with NSStream and RESTful APIs 

Coming up to Speed on Objective-C and Model-View-Controller 

Connecting Apple's iPhone to Google's Cloud 

No Objective C Required! Use Your Web Skills to Develop Apps 

Advanced Core Data: Importing and Exporting Data Efficiently 

File Systems Security with iPhone OS 4.0 

Mastering the External Accessory Framework 

Custom UlView Drawing with CoreGraphics 
Unit Testing That Doesn't Suck 
The iPhone OS Audio Landscape 
BlockHead: Blocks in Objective-C 
Building an iPhone Publishing House 
Core Data Tips and Tricks 



PLUS! 

Marketing Track 

Increase sales 
of your app in 
the app store* 



Dynamic App Data Updates via NSURLConnection 

Designing iPad Applications for the 21 st Century 

Is It Real or Is It Virtual? Augmented Reality on the iPhone 

Tips and Tricks for Enterprise iPhone Developers 

Mastering Apple's Push Notifications Service 

TANSTAAFL: Using Open-Source iPhone Ul Code 

iPhone Development for .NET Developers 

Making and Marketing Apps That Succeed 

Advanced Core Data: Building Your Own NSFetchedResultsController 

Using Core Animation to Build Complex and Attractive Interfaces 

Optimizing Data Caching for iPhone App Responsiveness 

Legal Issues in iPhone Development 

Building Killer Universal Apps for iPhones and iPads 

Moving to the iPad: What YOU Need to Know 

Building iPhone Applications in a Team Environment 

Unlocking the Video Potential of the iPhone/iPad 

Graphic Design Techniques for Developers 

From JavaScript to iPhone SDK Programming 

Succeed with iPhone/iPad Apps Marketing 

Three Hello Worlds in Three Hours 
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ecessions, wars, natural disasters— the Knights of the 
Software Development Table handled those challenges, 
and more, during 2009. 
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Rather than swords and shields, the mighty warriors 

wielded Twitter. Many took their first journeys into the 

Cloud or went into new adventures in mobile apps 

development. With trusty IDEs and reliable ALM systems 

by their side, our brave knights went in all directions, 

many choosing a traditional path, others finding a more 

agile route to success. 



Let the heralds proclaim the SD Times 100! As we review the 

year past, the editors of SD Times hereby recognize the top 

leaders and innovators of our glorious industry. The 100 companies 

and projects listed herein have ably demonstrated their ability to set 

the agenda and advance the state of the art. 

From Web, Web 2.0 & Rich Internet Applications to Agile & Collabo- 
ration, from Tools & Frameworks to Quality Assurance, from Software 
Confirmation Management to overall Influencers, this year's Knights of 
the Software Development Table hail from far and wide. 
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King Arthur would be proud. ®& 
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Influences 

Android Project 

The Apache Foundation 

Apple 

Eclipse Foundation 

Free Software Foundation 

Google 

IBM 

Intel 

Linux Foundation 

Microsoft 




Mono Project 

Oracle 

OSGi Alliance 

Scala 

Software Freedom Law Center 

StackOverflowxom 

Twitter 

VMware 




^fllt 




Adobe 


Gizmox 


Django 


HTML5 


Drupal 


Ruby on Rails 


Engine Yard 





^^ 



qcoofc & Bramentorfes 



ActiveState 

Altova 

Black Duck 

Eclipse Foundation 

Electric Cloud 

Elementool 

Embarcadero 

Quest 




- 



Sparx Systems 

SpringSource 

Tasktop 



&$U & GplteUxnttm 



Agile Alliance 

CoIIabNet 

OutSystems 

Rally 

ThoughtWorks Studios 
VersionOne 




Software Cionfiaurafion 
management 




Software £eou% 



■ 



Coverity 

Hewlett-Packard 

IBM 

Klocwork 

Progress 

SafeNet 




^^r*™> 







£0& & OkMUwm 



Active Endpoints 

AmberPoint 

AMQP Group 
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iWay 
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Amazon 
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DataBase & Data Took 
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Build Something Amazing 



Best-of-Breed Charting & Data Visualization for .NET 

Brilliant Rendering • Unmatched Interactivity • Smooth Animation • And Much More 
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Breathtaking Dashboards for WPF & Silverlight 

Experience the next generation of ComponentArt's data visualization components 

www.ComponentArt.com 
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ComponentArt Ul Framework provides the visual quality and flexibility to create highly 
functional, breathtaking dashboards. Included in the download package are the latest 
versions of our award-winning products. Get it today at www.componentart.com. 
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ASPM: Shifting 

gears to the Web 

Developers now have the keys to granular 
control and better access to jQuery 




^M SRNET 4.0 is very different from its 
MM "out-of-the-box" forebears. Micro- 
MM soft has transitioned away from 
■ I Windows -oriented programming to 
promote more contemporary Web devel- 
opment standards, experts say. 

As part of this new direction, Microsoft 
has given developers more granular con- 
trol over Web content in Windows Forms, 
embraced the jQuery JavaScript library, 
and elevated its Model-View-Controller 
(MVC) framework to a greater promi- 
nence in the .NET stack. 
"I think the changes 



in ASP.NET can be summed up in these 
proverbial four words: close to the metal," 
said Andrew Brust, a Microsoft regional 
director (recognized by Microsoft for 
technical expertise) and chief of new tech- 
nology at twentysix New York. Microsoft 
is allowing developers to cut through its 
forms package abstraction layer, he 
explained. 

"Whether it's URL routing, program- 
matic control of meta-keywords and 
description content, better control over 
view state or over server control-generated 
client IDs, Web Forms becomes much less 
of a black box and much more something 
that provides fine-grained control for those 
who want it," Brust said. 

URL routing adds search-engine opti- 
mization value to WebForms, said Chris 
Bannon, AS P. NET product manager at 
ComponentOne. "Its easy to use, espe- 
cially if you are familiar with MVC." 

View state is the technique used by an 

AS P. NET Web page to persist changes to 

the state of a Web Form across postbacks, 

continued on page 30 ► 
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according to Microsoft. The change to 
view state, while subtle, cannot be over- 
looked, said Todd Anglin, chief evange- 
list at Telerik. Its model is now "opt out" 
rather than "opt in," creating an easy 
way for developers to take advantage of 
view state. 

Microsoft also added compression for 
session state using Gzip (GNU zip). 
AJAX compression produced a radical 
reduction in response times in Infragis- 
tics' ASP.NET AJAX controls, said 
Andrew Flick, product manager for Win 
Client at Infragistics. 

Other time-savers are focused on 
developer productivity. User-generated 
control IDs eliminate the challenge of 
trying to find unpredictable control IDs, 
said Bannon. A control ID uniquely 
identifies ASP.NET server controls, thus 
enabling them to be programmatically 
accessed in the code-behind class, 
according to Microsoft. 

"It's easier to write j Query against 
IDs that you know without having to 
wait until they render to know what they 
are," Bannon said. It is easier for a 
developer to remember what a control 
does if he or she knows the name of the 
control, he explained. Microsoft is also 
giving developers more control over 



'jOuery is clearly the path to 
writing JavaScript in ASP.NET. 
It's the platform you want to be 
building against' 

— Todd Anglin, chief evangelist at Telerik 
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client-side scripting. 

By supporting jQuery, Microsoft is 
encouraging its developers to directly 
write client-side scripts in order to imple- 
ment AJAX features in their applications, 
rather than relying on server controls to 
emit that script, said Brust. Microsoft's 
embrace of jQuery has been wholeheart- 
ed, both in technology and in terms of 
product team enthusiasm, he added. 

Microsoft has shifted its work away 
from writing its own AJAX libraries to 
jQuery plug-ins, said Anglin. "It sends a 
message. jQuery is clearly the path to 
writing JavaScript in ASP.NET. It's the 
platform that you want to be building 
against." 

New client-side AJAX libraries 



shipped with .NET 4.0. Those included 
"cool improvements" for client-side 
templating and writing controls based 
on JavaScript, Anglin said. "Microsoft's 
templates are outstanding, but develop- 
ers should be looking to the future of 
what Microsoft is doing with jQuery." 

However, the productivity offered by 
the templates in the near term may be 
outweighed by the long-term impact of 
Microsoft's technology shift to jQuery. 
Organizations that are starting to adopt 
ASP.NET should pause before using 
Microsoft's AJAX templates, because 
Microsoft will no longer be enhancing or 
investing in those, Anglin noted. The 
existing Microsoft AJAX library is avail- 
able under an open-source license. 



However, Microsoft's new site tem- 
plate in Visual Studio 2010, which follows 
the company's prescriptive guidance for 
building WebForms applications, 
includes references to jQuery, Bannon 
said. The template is one of the quickest 
ways to get started with an ASP.NET 
product, he said. 

Some of the benefits of using jQuery 
are that it allows developers to write 
"true" AJAX code, said Bannon. "jQuery 
lets you write code against markup and 
not worry about cross-browser compati- 
bility. You don't spend 90% of your time 
debugging as you previously had to [with 
Microsoft's AJAX library]." 

Telerik has been adopting jQuery 
internally for its RadControls for 
ASP.NET, Anglin said. The result has 
been controls that have a smaller foot- 
print, simpler APIs and more richness, 
he added. 

Microsoft's decision to use jQuery 
shows that it recognized jQuery was 
becoming synonymous with "JavaScript, 
and that competing with jQuery would 
do nothing to drive its business model: 
selling server licenses," Anglin said. "For 
Microsoft, it was a better use of 
resources to make ASP.NET more 
attractive than to try to build the best 
continued on page 32 ► 
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JavaScript library." 

A small part of its motivation was to 
progressively win over some of the "tra- 
ditionally anti- Microsoft crowd" by 
adopting a popular open-source library, 
Anglin added. "It's not likely enough to 
see converts in droves, but it will give 
many open-sourcers reason to pause and 
realize how Microsoft has changed." 

COMING OF AGE 

Similarly, Microsoft's strategy with its 
MVC framework is to pull PHP and 
Ruby developers into the ASP.NET 
world of doing things, where application 
front ends are lightweight and respon- 
sive, Infragistics' Flick said. 

ASP.NET MVC 2 enables developers 
to build more modular, reusable applica- 
tions, said Mark Dunn, a regional direc- 
tor and president of DUNN Training 
and Consulting. The MVC pattern sepa- 
rates business logic from presentation 
logic as well as providing a clear distinc- 
tion between client and server code. 

"ASP.NET MVC now has a promi- 
nence in the .NET stack that is at least 
equal to that of ASP.NET Web Forms. 
ASP.NET MVC was introduced almost as 
a skunk works project — a kind of interest- 
ing curiosity — and yet it now seems to be 



entrenched and fully part of the .NET 
Web development orbit," Brust said. 

Microsoft's ASP.NET Dynamic Data 
framework has also come of age. 
Dynamic Data enables developers to 
build data-driven websites that work 
against the ADO.NET Entity Frame- 
work or LINQ to SQL. ASP.NET 4 
extends the framework to any applica- 
tion; its use was previously limited to 
Dynamic Data projects, Bannon said. 

Consequently, any developer can 
integrate Dynamic Data into his or her 
ASP.NET data control with just one line 
of code, he explained. Dynamic Data 
adds rich views and editors to controls. 
ComponentOne is using Dynamic Data 
in its GridView ASP.NET grid control 
for field and type validation. 

"Tons of people are using data con- 
trols. If they take time and call this one 
line of code, they can enhance UI and 
validation in their application," Bannon 
said. "The major benefits of Dynamic- 
Data are strongly typed UI elements, 
built-in data validation, template-driven 
views/editors, and it is entirely driven by 
metadata. Dynamic Data is my new 
favorite feature in ASP.NET 4.0, and 
leveraging it in existing apps can 
enhance your UI and data integrity." 

ASP.NET also provides developers 
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with broader options for caching, reduc- 
ing memory requirements and increas- 
ing application scalability. Microsoft's 
hard-coded caching model, which only 
utilizes server memory, has been 
replaced with a provider-based model. 
The new model allows developers to sub- 
stitute AS P. NET's built-in providers with 
their own solutions or solutions from 
third-party vendors, Telerik's Anglin said. 
Using disk-based caching is slower 
but consumes less memory, he said. "It's 
good for things that are not accessed 
often." Developers may also use Micro- 
soft's AppFabric distributed caching 
solution to scale their applications as the 
demand for them increases, he added. 
"Applications will not hit limits as they 



become more popular or need to be 
adapted to new programming styles." 

twentysix New York's Brust added 
that direct control of the emitted page's 
content is what many developers want, 
regardless of platform, and now 
ASP.NET developers, whether they use 
MVC or Web Forms, have that control. 

"Developers who have worked heav- 
ily with .NET 1.x and 2.0 may find this 
shift awkward, even regressive," he said. 
"I would encourage them to open their 
minds to it and rethink the way they 
code and architect their applications to 
accommodate the change. That will 
help them be in sync with contemporary 
Web development standards across all 
platforms." I 
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FROM THE EDITORS 

The cloud talks 
dollars and sense 

With all the supposed technological benefits of the cloud, one has 
emerged as possibly the most exciting benefit for development 
managers: lowering your monthly bills. Every month, Amazon, Rack- 
space, GoGrid, Salesforce, or whichever service you're using will bill you 
for the resources that you consume. And only for what you consume. 

A cloud bill certainly represents a different expense model for your 
business than buying or leasing physical servers, in large part because 
your software is directly generating these bills. 

In theory, the better your software is written, the lower your cloud 
charges may be. Conversely, the less efficient your software, the higher 
your charges may be. 

This is a throwback to the days of mainframe computing, when depart- 
ments or customers were charged for computing resource units. A rogue 
algorithm or a misfiring loop could incur hundreds or thousands of dollars 
in billing. With a close eye on their budget, programmers and systems ana- 
lysts learned to make their batch jobs run cleanly and efficiently. 

Those skills are needed today. In a model where you own your servers, 
and those servers live inside your data center, poorly written software 
means software that runs slowly. If a deployed application runs too slowly, 
the development team might work to optimize it — if anyone even notices. 
Alternatively, the IT staff could throw more hardware at the problem by 
moving the application to a bigger box, adding some memory or balancing 
the load between more machines. Either way, once the fix is done, its done. 

That's not true in the cloud. Inefficient code requires more resources, 
and therefore results in higher costs for your business — and more profit 
for the cloud provider. Depending on the application, it may be worth 
dedicating staff resources to code or database optimization. Reduce the 
bandwidth, reduce the memory, reduce the database access, improve the 
algorithms. In some cases, you may even be able to shrink the virtual 
server your app needs in the cloud. All these efforts may pay off in next 
month's bill. 

The cost equation offers a tantalizing reason to take advantage of in- 
cloud services, such as dynamic scaling and server winnowing. Also, shrink- 
ing cloud servers during non-peak hours is another way to save money. 

The cloud has the real potential to reduce computing costs, and careful 
planning and performance optimization may lower the costs even more. 

Changing of the guard 

For the past eight years, this newspaper has recognized our industry's 
top leaders and influencers in the SD Times 100. What we've seen is 
that while large companies, such as IBM and Microsoft, dominate many 
of the longer- running categories, innovation still occurs in smaller com- 
panies that are taking the industry in exciting new directions. Meanwhile, 
many of the old standbys are holding up as well as ever. 

In 2003, the inaugural SD Times featured 10 categories, each with 10 
companies. We recognized leaders and innovators in Test & Debug, 
Deployment Platforms, Components & Libraries, Modeling, and others. 
We had a category for Standards Bodies & Consortia, which has mor- 
phed into today's Influencers category. This year, Agile & Collaboration 
joins the list of SD Times 100 categories. 

That debut SD Times 100 listed such companies as Rational Software, 
Merant, Mercury Interactive and BEA Systems. All are gone, as Sun 
Microsystems is now, but the legacy of their work continues at IBM, Ser- 
ena, HP and Oracle, perennial leaders of the industry. 

This year, honorees now include open-source software projects and 
websites as well as companies. So, StackOverflow.com, Git and Gizmox 
take their place alongside the graybeards of the industry, along with the 
NoSQL movement, Django, Engine Yard and the OSGi Alliance. 

We hope you enjoy the 2010 SD Times 100. I 



Are open-source foundations 
still relevant? 



Recently, the Apache Software Foun- 
dation (ASF) celebrated its 10th 
birthday. As the day approached, 
I spoke with several Foundation repre- 
sentatives and enjoyed hearing their sto- 
ries of their accomplishments and their 
hopes for the future. As I lis- 
tened to them, I could not help 
but wonder whether the time 
for open-source foundations 
has come and gone. 

In the early days of the 
movement, the Free Software 
Foundation (FSF) was the key 
player in establishing an open- 
source foothold. It was the 
pointy end of the lance, with 
lots of emphasis on "pointy 
end." Success, which took a solid two 
decades, was hard won and important. 

Since then, however, the contribu- 
tions of the FSF have primarily consist- 
ed of revisions to licenses, campaigning 
against patents, and revving existing 
products. No new products with the 
sweep and obvious usefulness of emacs 
or gcc have come to market via the FSF 
for a very long time. 

The ASF, in my view, is in a similar 
point in its trajectory. Great, new 
Apache projects are a thing of the past. 
The Apache Web server and the Apache 
Portable Runtime were important con- 
tributions when they first came out. So 
were Jakarta and the Apache Commons 
and, supremely so, the business-friendly 
Apache license. 

But the ASF has increasingly become 
a mere host as its role has changed. It 
has become primarily an organization 
for taking in projects from other sources. 
It gives those projects tools, a website, a 
process for establishing community, and 
visibility. 

The problem is that many of the pro- 
jects it has accepted were moribund or 
likely to become so (for example, Hive- 
mind, a codebase donated by BEA when 
that company could find nothing else to 
do with it). It is a standout in this 
"dumping ground" category. Its last 
release was in late 2006, but it took three 
more years for the project to be official- 
ly retired. 

Other Apache projects are such 
omnibus propositions that it's nearly 
impossible to fill all the needed roles. 
Apache POI, the project to read 
and write Microsoft Office files, is a 
prime example. The impenetrably name 
HWPF subproject works on reading and 
writing Microsoft Word files. That pro- 
ject has been looking for a lead develop- 
er for years, and the work on other POI 
subprojects advances slowly. 

Moreover, the ASF is willing to 
accept multiple projects that do the 



Integration Watch 




same thing. I am not talking about 
Apache Ant vs. Apache Maven, but pro- 
jects that are essentially duplicates. For 
example, the ASF's two continuous inte- 
gration (CI) servers: Apache Continuum 
and Apache Gump. While competition 
is indeed desirable, hosting 
competing products under 
the aegis of the same organi- 
zation cannot be a plus. 
(Both CI servers are likely to 
be rendered irrelevant by 
Hudson, which is a hub of 
intense activity and increas- 
ingly the preferred open- 
source CI server.) 

The ASF once stood as 
the host for top projects. As 
the years have passed, its ability to con- 
trol the quality of the incoming projects 
and to breathe added life into them has 
steadily diminished. It still attracts good 
projects (Hadoop), but for each one of 
those, it also picks up its share of mature 
projects that are unlikely to develop 
much further (Subversion). It is becom- 
ing increasingly like a pure open-source 
hosting site with the limitation of a 
bureaucratic acceptance process. 

The upshot is that other sites are 
emerging to become hot spots of the 
open-source universe. Among these is 
Codehaus, which hosts Groovy, Grails, 
Jetty, JRuby, Drools and the majority of 
plugins to Apache Maven. Another site 
is Google Code. The latter has become 
an important player due to the many 
open-source contributions of Google 
itself. Google Chrome (browser), V8 
(JavaScript engine), Google Web Toolk- 
it, Google Guice (dependency injec- 
tion), and the Go language are all stored 
in this repository. 

A final site of interest is GitHub, which 
hosts the code for Ruby on Rails, j Query 
git itself, and many other projects. 

There is a clear transition going on. 
The bazaar of open source used to be 
much more centralized than it is today. 
It used to gather around certain oases 
such as the FSF and the ASF. But 
those organizations are slowly being 
converted into just hosts as their origi- 
nal contributions of actual code have 
declined. Their principal role going 
forward is providing licensing terms, 
legal opinions and, to a lesser extent, 
serving as expressions of the larger 
open-source movement. But the move- 
ment itself is now highly heteroge- 
neous and much more oriented toward 
good hosting sites, rather than founda- 
tions and institutions. I 

Andrew Binstock is the principal analyst 
at Pacific Data Works. Read his hlog at 
hinstock.hlogspot. com. 
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IT SEEMS AS THOUGH there are con 
ferences on just about anything, which 
means there speakers with expertise in 
just about everything as well. Topics 
such as agile practices, Twitters annota- 
tions and cloud computing are spoken 
about frequently, but how about ways to 
hack into an ATM machine? 

At this July's Black Hat Las Vegas, a 
computer security conference, security 
researcher Barnaby Jack plans to deliver a 
speech entitled "Jackpotting Automated 
Teller Machines." He is also set to disclose 
a new multi-platform ATM rootkit, which 
according to Wikipedia is "software that is 
designed to gain administrative-level con- 
trol over a computer system without being 
detected." ATMs 
now are typically 
compromised in 
roundabout ways 
(i.e. secret cameras 
to tape someone's 
PIN), but Jack's 
talk will focus on a more direct way: bugs 
in an ATMs software. 

— Katie Serignese 

A FRIEND OF MINE, OVER burritos, 
mentioned that he thought the Apache 
Hadoop project was a piece 
of junk. He then went on to trash a num- 
ber of other Apache projects, including 
the Cassandra NoSQL distributed data- 
base. 

"So what's better?" I asked. 

"The NoSQL I'm writing," he 
replied. This was the expected answer, 
of course. This particular friend is a 
super programmer who thinks he can do 
better than most other developers. He 
may even be right. 

But there's an awful lot to be said for 
software that has already been written. 
Sure, my friend can spend his days 
working on a from-scratch solution, but 
people who live in the real world and 
have to work there don't have time to 
write everything from scratch. And 
frankly, while I agree that some aspects 
of Hadoop need work, such as the 
Hadoop File System, the most impor- 




tant thing about the project is not how 
provably optimum all its functions are, 
but the fact that it exists at all. 

These technolo- 
gies are still in their 
infancy and are a 
vast improvement 
over the previous 
situation, in which 
no solutions existed 
at all for these new- 
fangled big data problems. So while my 
friend works slowly on his NoSQL side 
project, I'll take his assessments with a 
grain of salt. And I'll be sure to find 
someone who thinks his work stinks, too, 
if and when he's completed it. 

— Alex Handy 

AT FIRST PASS, MICROSOFT'S shift 
from its AJAX library to j Query seemed 
like a prototypical Microsoft move to 
ditch one existing technology for anoth- 
er. But this in this case, Microsoft has 
done the right thing for developers. 

j Query is the de facto standard in 
AJAX development, and Microsoft 
accepted it instead of continuing to build 
a competing library, j Query has become 
its new baseline. That's good, because 
real world development projects use 
open-source components. 

Microsoft's acceptance of jQuery 
demonstrates that it is listening to what 
developers want versus dictating solu- 
tions from the top down. 

— David Worthington 

MUCH ADO IS BEING MADE over yet 
another round of Facebook privacy tin- 
kering. I'm not sure what the problem is, 
since the site's founder has all but come 
out against the notion of privacy itself. 

Liz Gannes, writing for GigaOM, is 
concerned that Facebook is not doing 

n enough to explain the pri- 
vacy changes to its users, 
which is supposedly where 
the consternation is com- 
ing from. It's a tough task 
either way, though; there 
are over a hundred differ- 



ent privacy options to be muddled 
through, so try explaining that. 

Instead of the onus being on Face- 
book, which has made its intentions 
quite clear, perhaps the onus is on tech 
writers and journalists who are still con- 
fused (or pretending to be confused?) 
about social networks and privacy. Peo- 
ple like Mark Zuckerberg view privacy 
as an obstacle, not something to be pro- 
tected. The press does not do a good job 
conveying that reality. 

Complaining about Facebook's privacy 
changes is pointless when its goal is to 
grow so big, you have no choice but to 
expose your private data to it. Facebook 
does not care how many people are 
turned off by its changes. Maybe journal- 
ists should stop pleading with Facebook 
to be more open about its changes and 
start being more open about their com- 
placency in dealing with the company. 

— Adam LoBelia 

SOMETIMES, ADVANCES in technolo- 
gy get us excited about the wrong thing. I 
now have an iPhone that can locate a 
restaurant in the vicinity of where I am at 
any given moment, and that can tell me 
when my beloved Mets have scored or 
been scored upon, and I think, "This is 
very cool." But in the grand scheme, is the 
human experience being advanced by 
Flash video, GPS and iPhone apps? 

The other day, I came across some 
news that made me think, "Now THIS is 
what we ought to be using technology 
for!" IBM has announced it is launching a 
long-term research effort to bring togeth- 
er data that we can use to improve human 
health. Initially, the project will focus on 
childhood obesity, and will look at such 
factors as agriculture, transportation, city 
planning, and eating and exercise habits to 
provide real recommendations as to how 
we can improve our health. 

IBM says its expertise in computa- 
tional modeling, math and large-scale 
analytics can bring together data in a 
way that shows wider connections. To 
this, I say, "THIS is very cool!" 

— David Rubinstein 



Open source software has comparable security 
to commercial counterparts 



DATA WATCH 



According to Veracode's State of Software 
Security report, released on March 1 of this 
year, there is little difference among open- 
source, commercial and internally developed 
software in terms of acceptable first submis- 
sion rate and remediation time. First-submis- 
sion rates were calculated against the 
CWE/SANS Top 25 Most Dangerous Program- 
ming Errors. All projects were evaluated based 
on projects surveyed in Veracode's cloud- 
based application risk-management service. 



Type of project 



Open source 



% of acceptable 
first submissions 



39% 



Avg. no. of days 
for remediation 



36 



Commercial 



38% 



82 






Internally developed 



31% 



48 



J 



Source: Veracode 
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A distraction into optimization 



If you want to take a beautiful photo- 
graph of a planet, use a webcam. Digi- 
tal imaging and software have revolution- 
ized amateur astrophotography. Because 
objects within our own solar system are 
quite bright, long exposures are not gen- 
erally needed. Rather, videos are used. 

Because of the small sensor sizes of 
webcams, the images are highly magni- 
fied, but even so, a planet will only fall 
across a relatively small amount of pix- 
els. When the videos are played at full 
speed, the results jitter from breezes 
and even footsteps, and boil from the 
distortion of even the clearest skies. 

But software can seek to align frames 
on high-contrast features, analyze and 
average over hundreds of frames, and 
produce images that compare to the best 
observatory-based photos of just a few 
decades ago. (Amateur astrophotogra- 
phy of dim objects in the deep sky is per- 
haps even more spectacular, but uses 
different equipment and techniques.) 

While I can't pretend that I'd ever 
grind a 20-inch mirror so smooth it can 
focus light within a fraction of a wave- 
length, my amateur enthusiasm can easily 
divert me into musing about higher-per- 
forming alignment and information pro- 
cessing. Even more pressing was that 
every time I tried to capture video on my 



laptop, the software crashed. This wasn't 
shocking, as my astrophotography camera 
was something I built one afternoon with 
a film canister, a Dremel, and an old Log- 
itech Orbit webcam, and I appeared to be 
the first person to combine this particular 
model, driver and capture software. 

Before I could do anything interesting 
algorithmically, I needed to get 
the software to stop crashing 
the moment the "Play" button 
was pressed. 

Luckily, the software was 
FOSS and the source code was 
easy to find. I forgot how intim- 
idating C projects are at first 
glance — so many files, so little 
structural guidance! It was 
actually structured well, but it 
still took a few pages of notes 
about the preprocessor before proper 
debug build was up. After that, it was easy 
to find an "optimized" transform based on 
the assumption of a 32-bit architecture. 

Things got interesting here. On one 
hand, the project couldn't be further from 
the structure of today's average enterprise 
application: no objects, no managed 
memory, no unit tests, no dependency 
injection framework. On the other hand, 
the preprocessor actually led to quite plas- 
tic source code and, in a way, provided the 







flexibility found in dependency injection. 
The original programmers' concerns 
were apparent: They wanted perfor- 
mance. What was interesting was how the 
history of assumptions made over the 
course of the application's years of active 
development were so clearly embedded 
in this low-level code. All that flexibility 
from the preprocessor was 
being used to (cleverly) create 
a single-threaded function that 
operated on a byte at a time; 
function calls and unrolled 
loops were bad, integer math 
and bit shifting were good. 

Ideally, there would have 
been a version of the trans- 
form that would have empha- 
sized clarity rather than per- 
formance. I could have 
#DEFINEd it into existence, profiled it 
and started an optimization pass based on 
measurement. Even without two good 
books on assembly language near at hand 
(see my May 15 column, "Assembly 
required"), Intel has recently released 
version 3.0 of their excellent Threading 
Building Blocks library. The new TBB is 
compatible with VS2010 and can run on 
top of the Windows 7 Concurrency Run- 
time. While there are only two cores in 
my laptop, 4-core laptops based on Core 
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O'Brien 




i7 are the new hotness, and 6- and 8-core 
laptops will certainly be available in the 
not-too-distant future. 

Even if the dual cores in my laptop 
were not going to give me a big jump in 
multithreading performance, I wanted to 
go back to the original algorithm. Unless 
you have good knowledge of the why's and 
wherefores of previous optimization pass- 
es, you should start from scratch. It might 
be that you end up going down the same 
optimization path as your predecessors, 
but you'll discover that your needs or con- 
straints lead you down a different path. 

In my case, I didn't want the transform 
to happen at all! The frame data was being 
transformed from 12-bit YUV to 24 bits of 
RGB, but for this type of work, the luma 
(Y) is all that's needed at capture time. 

Of course, I would have to rewrite the 
UI and storage routines. And if I were 
going to do all that, would it be wiser for 
me to just start from scratch and write the 
thing entirely in C#? As I pondered this, 
the corner of my eye caught a glimmer 
through the front window — Sirius was 
blazing in the twilight. I stepped outside 
and looked at Orion falling toward the 
horizon. Saturn was high in the sky, and if 
the clouds didn't fill in, I'd get a shot at 
Omega Centauri in a couple hours. 

The software could wait. I 

Larry O'Brien is a technology consul- 
tant, analyst and writer. Read his hlog at 
www. knowing, net. 
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iPhone, Visual Studio 2010, Spring and more 



An old Scottish proverb describes a 
drunkard as someone whose head 
is full of bees. My head is full of bees, 
but not because of alcohol. Instead, I'm 
drunk on platforms. Whether it's Micro- 
soft's .NET, Apple's iPhone or VM ware's 
Spring, everything is buzzing around. 
Please consider this Take as a core dump 
on those three topics; if there's a theme 
here, it's purely coincidental. 

Consider, for example, the 
iPhone. There are three sepa- 
rate vectors relating to Apple's 
mobile platforms buzzing in my 
cranium: the SD Times iPhone 
application, the technical pro- 
gram for iPhone/iPad DevCon, 
and my barely used iPad. 

We're very proud of our 
new SD Times Newsreader 
iPhone app. It was written by our in- 
house IT team (here's a big shout-out to 
Usman S.) and is available in the iTunes 
App Store. Use the app on your iPhone, 
iPod touch or iPad to read the latest sto- 
ries from sdtimes.com any time you've 
got a live WiFi or cellular data connec- 
tion. It's aversion 1.0 product, and we've 
got some great ideas for version 2.0 — 
and it was wonderful to get our feet wet 
with mobile development. Download it 
(totally free) and let me know what you 
think at feedback@bzmedia.com. 

We're equally proud of how our plans 
are coming together for our first 
iPhone/iPad DevCon conference. I'm 
focusing right now on the workshops 
and technical classes, and at the time of 
this writing, the program is about 98% 
complete. A lot of work goes into putting 
on a technical conference, especially for 
the inaugural event; there's a great deal 
of research into what real developers are 
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doing and what they need to learn. We 
feel confident that we've assembled a 
top-notch faculty and have selected the 
appropriate topics for enterprise devel- 
opers, ISVs and even "indie" developers 
seeking their fortunes in the mobile 
apps gold rush. Hope you can join us: 
San Diego, Sept. 27-29, 2010. 

Then there's the iPad. I pre-ordered 
a WiFi model in March, and it 
arrived in early April. I've 
maintained that my only rea- 
son for being an early adopter 
is to see what the iPad means 
to the future of publishing, 
while contemplating what an 
SD Times newsreader app for 
that platform would look like. 
And you know... that reason 
has turned out to be the truth. 
I've got the iPad, it works fine and it's 
impressive. I can't find a single signifi- 
cant design flaw — quibbles, yes, but no 
major complaints. But even after loading 
it with apps and taking it on two trips, I 
can't figure out what to do with it. For 
the past week, the iPad has sat unused 
on my desk. Maybe I'm just the wrong 
customer demographic. 

Second platform: Microsoft's Visual 
Studio 2010 and .NET Framework 4.0. 
Sadly, there's not been enough time to 
go hands-on with the bits myself yet, 
though I'm waiting for the opportunity 
to roll up my sleeves and get to work. 

If you're in a Microsoft shop, you've 
undoubtedly been following what's hap- 
pening with VS2010. There are some 
excellent additions to the tool chain, par- 
ticularly the emphasis on code quality. 
Microsoft has long focused on developer 
productivity, but it's especially gratifying 
to see that VS2010 has better support 



for unit testing and makes debugging 
easier. The integrated team support is 
also solid for those who don't need a full- 
fledged SCM system. 

I'd like to see Visual Studio continue 
down this road, and also embrace more 
agile practices as core functionality. We'll 
see what happens. If you've not been fol- 
lowing what's happening with this launch, 
check out David Worthington's article 
summarizing what's new and different in 
VS2010 and .NET 4.0 ("Visual Studio 
2010, .NET 4.0 finally go live," May 1). 

And then there's Spring. As some 
pundits have begun to say, the real 
sources of innovation in the Java uni- 
verse appear to be in the third-party 
frameworks and in the open-source 
community. While the Java Community 
Process is still important, we haven't 
seen any leadership yet under its new 
owner, Oracle. As I mentioned in a pre- 
vious column, initiatives from organiza- 
tions like SpringS ource are showing that 
Java remains a cutting-edge enterprise 
platform. Its future remains bright. 

F. Scott Fitzgerald said, "The test of 
a first-rate intelligence is the ability to 
hold two opposing ideas in mind at the 
same time and still retain the ability to 
function." While I don't claim to have a 
first-rate intelligence, there's no doubt 
that in today's heterogeneous comput- 
ing reality, we all need to work with 
multiple opposing — and competing — 
platforms at the same time, while still 
being able to function. No wonder my 
head is full of bees. 

Alan Zeichick is editorial director of 
SD Times. Follow him on Twitter at 
twitter coml zeichick. Read his hlog at 
ztrek. blogspot. com. 
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AGILE CONFERENCE 
FORCED TO RELOCATE 

The Agile 2010 Conference, originally scheduled 
for Nashville, Tenn., has been moved due to severe 
flooding that has ravaged the city. The conference 
will now be held at the Walt Disney World Swan 
and Dolphin hotel in Orlando, Fla. The conference 
dates will remain the same (Aug. 9-13). 

"With the uncertainty of when the Nashville 
facilities could be restored, we decided to relo- 
cate the Agile 2010 Conference to ensure we can 
accommodate the increased interest we have 
had from attendees," explained James Newkirk, 
Agile 2010 Conference chair, in a written state- 
ment. "We are committed to providing the most 
compelling and practical sessions on agile soft- 
ware development principles and practices, and 
this move will ensure the conference will contin- 
ue to provide an outstanding experience for all 
attendees." 



IT spending in the Middle East and Africa is set to grow faster than almost any oth- 
er region in the world as investment continues at a record pace with a 12% growth 
this year, four times that of the global average, according to research from IDC. 
While worldwide spending will only grow at 3%, the Middle East and Africa is set to 
buck the trend as emerging markets drive global industry growth, reports IDC. Glob- 
al IT spending figures are set to reach US$1.48 trillion for 2010, according to the 
study . . . Application performance monitoring company AppDynamics has closed 
a US$11 million round of financing, led by existing investors Lightspeed Venture 
Partners and Greylock Partners. To date, the company said it has raised $16.5 mil- 
lion in venture funding. AppDynamics will use the money to build out its next-gen- 
eration APM solution, according to a statement . . . Object Management Group Inc. 
has announced that it is sponsoring a case study competition to highlight business 
success stories to edcuate companies pursuing BPM/SOA adoption. According to 
the consortium, entries will be judged on the complexity of the business problem 
address, the business value achieved, the level of sophistication of cross-organiza- 
tional collaboration, and the use of BPM/SOA approaches and supporting technol- 
ogy. Entry forms can be picked up at www.bpmsoa-communityofpractice.org/cs-pr. 
Submissions will be accepted through June 29. Winners will be announced at the 
BPM/SOA Community of Practice meeting in Cambridge, Mass., on Sept. 21, and in 
October publications from OMG partners BPTech and TechTarget. I 
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Innovate 2010 June 6-10 

Orlando 
IBM 

www-01.ibm.com/software/rational/innovate 



RailsConf 

Baltimore 
O'REILLY MEDIA 

en.oreilly.com/rails2010 



June 7-10 



Microsoft TechEd June 7-10 

New Orleans 
MICROSOFT 

www.microsoft.com/events/techednorthamerica 



Apple Worldwide 
Developers Conf. 

San Francisco 
APPLE 

developer.apple.com/wwdc 



June 7-11 



ESC Chicago 

Chicago 
TECHINSIGHTS 

esc-chicago.techinsightsevents.com 



June 8-9 



eBay DevCon 

San Jose 
EBAY 

www.ebaydevcon.com 



June 8-10 



Enterprise 2.0 Conf. 

Boston 

UBM TECHWEB 

www.e2conf.com/boston 



June 14-17 



HP Technology Forum 

Las Vegas 
HEWLETT-PACKARD 

www.hptechnologyforum.com 



June 21-24 



SemTech 2010 

San Francisco 
SEMANTIC UNIVERSE 

semtech2010.semanticuniverse.com 



June 21-25 



Velocity Conf. 

Santa Clara 
O'REILLY MEDIA 

en.oreilly.com/velocity2010 



June 22-24 



Red Hat Summit June 22-25 

SJBoss World 

Boston 
RED HAT 

www.redhat.com/promo/summit/2010 

Open Source June 23 

Software Symposium 

Minneapolis 

ECLIPSE F0UNDATI0N/0MG 

www.omg.org/news/meetings/tc/mn/special- 
events/Eclipse.htm 



USENIX Annual 
Technical Conf. 

Boston 
USENIX 

www.usenix.org/events/nsdi10 



June 23-25 



0SC0N July 19-23 

(Open Source Convention) 

Portland, Ore. 
O'REILLY MEDIA 

www.oscon.com/oscon2010 



ACM SIGGRAPH 

Los Angeles 
ACM SIGGRAPH 

www.siggraph.org/s2010 



July 26-30 



For a more complete calendar of U.S. software 
development events, see www.sdtimes.com/calendar. 
Information is subject to change. Send news about 
upcoming events to events@bzmedia.com. 
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Don't take our word for it. 
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GCPowerTools.com/Switch 
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Dundas Dashboard is a highly extensible and customizable 
dashboard solution, that integrates easily into your ASP.NET, 
SharePoint, Silverlight or other web application. It provides you 
with a unified view of key metrics and a new level of strategic 
insight and decision-making. 
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